20 matches found
ralph
Ralph Une implémentation fonctionnelle de la technique de boucle autonome Ralph Wiggum pour Claude Code. Contexte Le plugin officiel ralph-wiggum du marketplace de plugins d'Anthropic est actuellement cassé en raison d'une mise à jour de sécurité dans Claude Code v1.0.20 août 2025. Le correctif d...
Mailpit code issue vulnerabilities
Mailpit is an email testing tool developed by Ralph Slooten personally. Versions of Mailpit prior to 1.28.3 had a code vulnerability. This vulnerability stemmed from the inlineRemoteCSS function in the HTML Check feature, which allowed external CSS files to be downloaded, potentially leading to...
Samba Spotlight mdssvc RPC Request Infinite
Description When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop did not validate a field in the network packet that contains the count of elements in an array-like structure. By passing 0 as the count value, the attacked function will run in ...
ralph-binder.de Cross Site Scripting vulnerability OBB-1328846
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Online-Exam-System 2015 - SQL Injection
Online-Exam-System 2015 suffers from a remote SQL injection vulnerability. Exploit Title: Online-Exam-System 2015 - 'feedback' SQL Injection Date: 2020-06-04 Exploit Author: Gus Ralph Vendor Homepage: https://github.com/sunnygkp10/ Software Link:...
Navigate CMS 2.8.7 - Authenticated Directory Traversal
Exploit Title: Navigate CMS 2.8.7 - Authenticated Directory Traversal Date: 2020-06-04 Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link: https://sourceforge.net/projects/navigatecms/files/releases/navigate-2.8.7r1401.zip/download Version: 2.8.7 Tested o...
Navigate CMS 2.8.7 - Cross-Site Request Forgery (Add Admin) Vulnerability
Exploit for php platform in category web applications Exploit Title: Navigate CMS 2.8.7 - Cross-Site Request Forgery Add Admin Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link:...
Navigate CMS 2.8.7 - ''sidx' SQL Injection (Authenticated)
Exploit Title: Navigate CMS 2.8.7 - ''sidx' SQL Injection Authenticated Date: 2020-06-04 Exploit Author: Gus Ralph Vendor Homepage: https://www.navigatecms.com/en/home Software Link: https://sourceforge.net/projects/navigatecms/files/releases/navigate-2.8.7r1401.zip/download Version: 2.8.7 Tested...
Ubuntu: Security Advisory (USN-3673-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ralphlauren.com XSS vulnerability
Vulnerable URL: http://www.ralphlauren.com/transparencyact/index.jsp?ab='-confirmOPENBUGBOUNTY-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4508 VIP website status:| Yes Check...
global.ralphlauren.com XSS vulnerability
Open Bug Bounty ID: OBB-198538 Description| Value ---|--- Affected Website:| global.ralphlauren.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Remote DoS in Samba (AD) LDAP server.
Description All versions of Samba from 4.0.0 to 4.1.21 inclusive are vulnerable to an anonymous memory exhaustion attack in the samba daemon LDAP server. A malicious client can send packets that cause the LDAP server provided by the AD DC in the samba daemon process to consume unlimited memory an...
60 Minutes Weighs Stuxnet's Legacy
The security community might understand what the Stuxnet worm did. Now the war is over what the worm means – Stuxnet’s legacy, if you will. The latest to weigh in on that question is Steve Croft, of the CBS news magazine 60 Minutes. We knew this story was coming when a 60 Minutes news crew turned...
UPDATE: Why Stuxnet-Like Attacks Aren't Going Away
Ralph Langner is the closest thing to a rock star that you get in the Dockers and pocket-protector world of industrial control systems. The German researcher made headlines in 2010 as among the first security experts to analyze parts of the Stuxnet worm’s code devoted to manipulating programmable...
Bits of code
Ralph Langner was a highlight of the S4 Conference, taking attendees through his detailed analysis of Stuxnet source code used to manipulate the Siemens 400 series programmable logic controllers PLCs. This shows a snippet of the Stuxnet code on display during Langner’s talk...
Reading material
Stuxnet expert and industry gadfly Ralph Langner was in attendance at S4 this year, as he has been in past years. This year, however, Langner had a new book to promote: Robust Control System Networks – a kind of call to arms for the industrial control sector to respond to a ‘post Stuxnet’ world...
Ralph Langner on Cracking Stuxnet
In his talk at the TED2011 Conference, Ralph Langner, a control systems security expert, discusses the work he and his team did to tear apart the Stuxnet worm and work out exactly what it does and what it’s target and ultimate purpose were...
CVE-2006-1898
Multiple cross-site scripting XSS vulnerabilities in Ralph Capper Tiny PHP Forum TPF 3.6 allow remote attackers to inject arbitrary web script or HTML via 1 the uname parameter in a view action in profile.php and 2 a login name. NOTE: the "Access to hash password" issue is already covered by...
CVE-2006-1898
CVE-2006-1898 describes multiple cross-site scripting (XSS) vulnerabilities in TinyPHPForum (TPF) 3.6 and earlier. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in the profile.php view action and (2) a login name. The documents do not provide ...
CVE-2006-1898
Multiple cross-site scripting XSS vulnerabilities in Ralph Capper Tiny PHP Forum TPF 3.6 allow remote attackers to inject arbitrary web script or HTML via 1 the uname parameter in a view action in profile.php and 2 a login name. NOTE: the "Access to hash password" issue is already covered by...